146725 matches found
The vulnerability of the TabGroups function in Google Chrome and Microsoft Edge browsers allows a hacker to replace the user interface.
The vulnerability of the TabGroups function in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to replace the user’s interface with malicious network traffic...
NULL Pointer Dereference in CRMF EncryptedValue Decryption
...
Possible NULL Dereference in Password-Based CMS Decryption
...
Out-of-Bounds Read in CMS Password-Based Decryption
...
Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()
...
Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion
...
Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
...
Heap Use-After-Free in the PKCS7_verify() Function
...
AES-OCB IV Ignored on EVP_Cipher() Path
...
Vim: Arbitrary Code Execution via Python Omni-Completion
...
Vim: Out-of-bounds Read in Terminal Screen Snapshot
...
OESA-2026-2614 catdoc security update
catdoc is program which reads one or more Microsoft word files and outputs text, contained insinde them to standard output. Therefore it does same work for.doc files, as unix cat command for plain ASCII files. It is now accompanied by xls2csv - program which converts Excel spreadsheet into...
SUSE CVE-2026-8863
Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the...
Security Updates for Microsoft Dynamics 365 (on-premises) (June 2026)
The Microsoft Dynamics 365 on-premises is missing a security update. It is, therefore, affected by a vulnerability: - Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 on-premises allows an authorized attacker to elevate privileges over a network. CVE-2026-4037...
Exploit for Untrusted Pointer Dereference in Microsoft
CVE...
Insufficient verification that responses belong to a query
...
The vulnerability of the professional speech recognition and document automation platform Nuance PowerScribe, related to a significant loss of significance, allows a violator to execute arbitrary codes.
The vulnerability of the Nuance PowerScribe professional speech recognition and document automation platform is related to the lack of a disassembly mechanism. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary commands...
The vulnerability of Google Chrome and Microsoft Edge browsers, related to insufficient validation of input data, allows attackers to execute arbitrary code.
The vulnerability of Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the browser’s sandbox through the created HTML page...
